691 matches found
PT-2021-5331 · Foxit · Foxit Pdf Editor +2
Name of the Vulnerable Software and Affected Versions: Foxit PDF Editor affected versions not specified Foxit PhantomPDF affected versions not specified Foxit Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations...
Foxit Reader和Foxit PhantomPDF 安全漏洞
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. An arbitrary file write vulnerability exists in Foxit Reader versions prior to 10.1.4 and PhantomPDF versions prior to 10.1.4, which stems from a failure to validate the CombineFiles pathname and can be...
PT-2021-5453 · Foxit · Foxit Reader +2
Name of the Vulnerable Software and Affected Versions: Foxit PDF Editor affected versions not specified Foxit PhantomPDF affected versions not specified Foxit Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations...
PT-2021-5251 · Foxit · Foxit Reader +2
Name of the Vulnerable Software and Affected Versions: Foxit PDF Editor affected versions not specified Foxit PhantomPDF affected versions not specified Foxit Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations...
Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals
In an unprecedented sting operation, the U.S. Federal Bureau of Investigation FBI and Australian Federal Police AFP ran an encrypted chat service called ANoM for nearly three years to intercept 27 million messages exchanged between criminal gang members globally. Dubbed Operation Ironside AFP,...
CVE-2021-27269
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Denial of Service Vulnerability in Phantom Route X32G
The X32G is a wireless router. A denial of service vulnerability exists in the Phantom Router X32G. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier carrier's router by sending a carefully constructed packet to a specific destination...
CVE-2018-20313
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read...
PT-2021-8830 · Wondershare +6 · Pdfelement6 Pro +10
Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 9.4 PhantomPDF versions prior to 8.3.9 and 9.x prior to 9.4 eXpert PDF 12 Ultimate affected versions not specified Expert PDF Reader affected versions not specified Nitro Pro affected versions not specified Nitr...
Directory Traversal Vulnerability in Phantom Route X18G Upnp Server
Phantom Router X18G is a router from Shenzhen Meike Star Communication Technology Co. A directory traversal vulnerability exists in the Mirage Router X18G Upnp Server, which can be exploited by an attacker to obtain sensitive information...
Directory Traversal Vulnerability in Phantom Route X18G Web Server
Phantom Router X18G is a router from Shenzhen Meike Star Communication Technology Co. A directory traversal vulnerability exists in the Mirage Router X18G Web Server, which can be exploited by an attacker to obtain sensitive information...
Foxit Reader和Foxit PhantomPDF 代码问题漏洞
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF, which can be exploited by attackers to spoof authenticated PDF documents via a malicious annotation attack, as the product does not take in...
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program, related to the use after release, allows a violator to execute arbitrary code.
The vulnerability of the Foxit Reader text viewer program and the Foxit PhantomPDF PDF editing program is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
CVE-2020-28203
An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash denial of service...
GHSA-6H7F-QWQM-35PP Arbitrary File Read in phantom-html-to-pdf
This affects the package phantom-html-to-pdf before 0.6.1. PoC js var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html: "document.writewindow.location='c:/windows/win.ini'" , functionerr, pdf var output =...
Arbitrary File Read in phantom-html-to-pdf
This affects the package phantom-html-to-pdf before 0.6.1. PoC js var fs = require'fs' var conversion = require"phantom-html-to-pdf"; conversion.allowLocalFilesAccess = false conversion html: "document.writewindow.location='c:/windows/win.ini'" , functionerr, pdf var output =...
Arbitrary File Read
phantom-html-to-pdf is vulnerable to arbitrary file read. An attacker is able to gain access and read arbitrary files on the host by specifying the file path...
CVE-2020-7763
This affects the package phantom-html-to-pdf before 0.6.1...
